[Hiring] Senior Cybersecurity Architect @HomeServe

Role Description

This role serves HomeServe’s senior security architecture authority, responsible for designing, reviewing, and governing secure architecture for new and existing services, applications, and integrations before they reach production. The position creates business value by reducing the likelihood and blast radius of security incidents, accelerating secure delivery through reusable patterns and paved-road guardrails, and helping HomeServe meet customer, regulatory, and contractual obligations. Reporting to the VP of Information Security, this role leads formal security architecture reviews—producing risk-rated assessments and tracked remediation or exception plans—and acts as a design authority at key delivery gates (e.g., permission-to-build and permission-to-operate). It champions Zero Trust and secure-by-design principles across identity, network, application, and data security, and partners with Product, DevOps, Cloud, and Legal/Privacy to embed those practices into cohesive, scalable patterns adopted by delivery teams. The role owns and advances the security architecture roadmap and strategy—with particular focus on hybrid/multicloud (AWS primary), API/integration, and emerging AI-driven systems—and provides technical oversight and security architecture guidance for incident response while mentoring members of the information security team.

Responsibilities

• Serve as the security architecture review and design authority for new solutions, integrations, and major changes.
• Evaluate solution designs at permission-to-build and permission-to-operate gates.
• Produce formal InfoSec assessments with risk-rated findings.
• Drive remediation or formal, time-boxed exceptions to closure.
• Champion and operationalize Zero Trust architecture: identity-centric access, least-privilege enforcement, micro segmentation, and continuous verification across on-premises, cloud, and containerized environments.
• Develop enterprise security reference architectures, reusable design patterns, and secure-by-design standards and “paved-road” guardrails.
• Design and review cloud security architecture across hybrid/multicloud (AWS primary).
• Embed security into the SDLC and DevSecOps toolchain.
• Assess and guide the secure design of data and AI system data protection and classification.
• Review API and integration security across platforms such as MuleSoft and Akamai.
• Conduct third-party and vendor security risk assessments.
• Map controls and findings to recognized frameworks (NIST CSF 2.0, NIST 800-53, ISO 27001).
• Enforce Privileged Access Management (PAM) standards.
• Participate in and act as an approver for the Architectural Review Board (ARB) and Change Advisory Board (CAB).
• Perform risk analysis for corporate functional and technical areas relevant to data security.
• Create and maintain security architecture documentation, standards, patterns, and procedures.
• Provide technical oversight and security architecture guidance for incident identification, response, investigation, and remediation.
• Research and maintain a knowledge base of information security and emerging-technology trends.
• Create solutions that balance business requirements with information and cyber security requirements.
• Enable and coach delivery teams and information security staff to adopt secure design patterns.
• All other duties as assigned.

Essential Functions

• Security architecture, design reviews & patterns: 40%
• Risk management, third-party & compliance: 20%
• Cloud, DevSecOps & integration security: 20%
• Security strategy, governance & roadmap: 10%
• Mentorship & security operations advisory: 10%

Qualifications

• Bachelor’s degree in information technology, computer science, or a related field, or equivalent work or education-related experience.
• 7+ years’ experience in IT Security, with demonstrated experience in security architecture and solution design review.
• Demonstrated experience designing Zero Trust and secure-by-design architectures.
• Hands-on experience securing hybrid/multicloud environments (AWS strongly preferred).
• Experience integrating security into DevSecOps and the secure SDLC.
• Experience with API and integration security.
• Exposure to securing data and AI/ML or automation/agentic systems.
• Experience must include security standards development, risk assessment, third-party/vendor risk, and compliance testing.
• Proficient knowledge of information security standards, controls, and frameworks.
• Working knowledge of key security technologies.
• Strong analytical and problem-solving skills; excellent verbal, written, and interpersonal communication skills.
• Effective time-, project-, and organizational-management skills.
• Must be able to work independently as well as in a team environment and maintain confidentiality.
• Industry certifications preferred: CISSP required or strongly preferred.

Benefits

• Most U.S. locations: $143,266.23 – $191,021.64
• Select geographic markets: $128,939.61 – $171,919.48
• Premium geographic markets: $157,592.85 – $210,123.80
• Annual Bonus Eligibility: 15%

Minimum Physical Requirements

The physical demands described represent those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform the functions of the position for which they work.